Vghost: A Nine-Year-Old Linux vhost Bug Gives Local Users Root and Lets Guests Hit the Host
No Comments on Vghost: A Nine-Year-Old Linux vhost Bug Gives Local Users Root and Lets Guests Hit the Host
CVE-2026-74580, nicknamed Vghost, is a stale-cache bug in Linux's vhost subsystem that gives local users root and, in one setup, lets a guest VM attack the host's QEMU process. Here is what's reported, who is exposed, and what to do now.
Linux Backdoors Are Dressing Up as Your Email Security Software
Rapid7 found Linux implants in South Korea and Taiwan posing as products like SpamSniper and ShareTech, and using SMTP for command and control. Here is what was reported and what defenders can do about it.